@gatanot/qualia_core 0.1.0

package/dist/tool/env.test.js

@@ -0,0 +1,42 @@
+import { describe, it, expect } from 'vitest';
+import { ToolContext } from './env.js';
+describe('ToolContext', () => {
+    describe('resolvePath', () => {
+        it('resolves relative path within workspace', () => {
+            const ctx = new ToolContext('/home/user/project');
+            const result = ctx.resolvePath('src/app.ts');
+            expect(result.classification).toBe('safe');
+        });
+        it('classifies system paths as reject', () => {
+            const ctx = new ToolContext('/home/user/project');
+            const result = ctx.resolvePath('C:\\Windows\\System32\\kernel32.dll');
+            expect(result.classification).toBe('reject');
+        });
+        it('resolves absolute path', () => {
+            const ctx = new ToolContext('/home/user/project');
+            const result = ctx.resolvePath('/home/user/project/src/app.ts');
+            expect(result.path).toContain('src');
+        });
+    });
+    describe('classifyCommand', () => {
+        it('classifies safe commands', () => {
+            const ctx = new ToolContext('/home/user/project');
+            expect(ctx.classifyCommand('ls -la')).toBe('safe');
+        });
+        it('classifies dangerous commands as confirm', () => {
+            const ctx = new ToolContext('/home/user/project');
+            expect(ctx.classifyCommand('rm -rf /tmp/test')).toBe('confirm');
+        });
+        it('classifies system-dangerous commands as reject', () => {
+            const ctx = new ToolContext('/home/user/project');
+            expect(ctx.classifyCommand('format C:')).toBe('reject');
+        });
+    });
+    describe('root', () => {
+        it('exposes root path', () => {
+            const ctx = new ToolContext('/home/user/project');
+            expect(ctx.root).toBe('/home/user/project');
+        });
+    });
+});
+//# sourceMappingURL=env.test.js.map

package/dist/tool/env.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.test.js","sourceRoot":"","sources":["../../src/tool/env.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC5B,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YAClD,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;YACtE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;YAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACzD,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YAC5B,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,oBAAoB,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/tool/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Tool System 模块
+ *
+ * 可插拔的工具注册与执行框架，用于 LLM function calling。
+ * 包含安全判定引擎，对危险操作实施确认或拒绝策略。
+ *
+ * 工具集数组（CORE_TOOLS / SCHEDULING_TOOLS）用于快速装配 ToolRegistry，
+ * 避免在多个入口重复列清单。添加新工具时只需更新对应数组，无需修改调用方。
+ *
+ * @module tool
+ *
+ * @example
+ * ```ts
+ * import { ToolRegistry, CORE_TOOLS } from './index.js';
+ *
+ * const registry = new ToolRegistry();
+ * for (const t of CORE_TOOLS) registry.register(t);
+ * ```
+ */
+export { ToolRegistry } from './registry.js';
+export { PendingConfirmation } from './types.js';
+export type { ToolDef, ToolResult, CommandClassification } from './types.js';
+export { classifyCommand, classifyFilePath } from './safeguard.js';
+export { ToolContext } from './env.js';
+import { readFileTool } from './tools/read-file.js';
+import { writeFileTool } from './tools/write-file.js';
+import { deleteFileTool } from './tools/delete-file.js';
+import { editTool } from './tools/edit.js';
+import { execTool } from './tools/exec.js';
+import { webSearchTool } from './tools/web-search.js';
+import { readMemoryTool } from './tools/read-memory.js';
+import { writeMemoryTool } from './tools/write-memory.js';
+import { scheduleTaskTool } from './tools/schedule-task.js';
+import { readTasksTool } from './tools/read-tasks.js';
+export { readFileTool, writeFileTool, deleteFileTool, editTool, execTool, webSearchTool, readMemoryTool, writeMemoryTool, scheduleTaskTool, readTasksTool };
+export { createSearchHistoryTool } from './tools/search-history.js';
+import type { ToolDef } from './types.js';
+/** 核心工具集：文件操作 + 搜索 + 记忆（Chat / Gateway 使用，再拼接 SCHEDULING_TOOLS 即为全量） */
+export declare const CORE_TOOLS: ToolDef[];
+/** 调度工具集 */
+export declare const SCHEDULING_TOOLS: ToolDef[];
+//# sourceMappingURL=index.d.ts.map

package/dist/tool/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tool/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC5J,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,wEAAwE;AACxE,eAAO,MAAM,UAAU,EAAE,OAAO,EAS/B,CAAC;AAEF,YAAY;AACZ,eAAO,MAAM,gBAAgB,EAAE,OAAO,EAGrC,CAAC"}

package/dist/tool/index.js

@@ -0,0 +1,53 @@
+/**
+ * Tool System 模块
+ *
+ * 可插拔的工具注册与执行框架，用于 LLM function calling。
+ * 包含安全判定引擎，对危险操作实施确认或拒绝策略。
+ *
+ * 工具集数组（CORE_TOOLS / SCHEDULING_TOOLS）用于快速装配 ToolRegistry，
+ * 避免在多个入口重复列清单。添加新工具时只需更新对应数组，无需修改调用方。
+ *
+ * @module tool
+ *
+ * @example
+ * ```ts
+ * import { ToolRegistry, CORE_TOOLS } from './index.js';
+ *
+ * const registry = new ToolRegistry();
+ * for (const t of CORE_TOOLS) registry.register(t);
+ * ```
+ */
+export { ToolRegistry } from './registry.js';
+export { PendingConfirmation } from './types.js';
+export { classifyCommand, classifyFilePath } from './safeguard.js';
+export { ToolContext } from './env.js';
+// 工具定义
+import { readFileTool } from './tools/read-file.js';
+import { writeFileTool } from './tools/write-file.js';
+import { deleteFileTool } from './tools/delete-file.js';
+import { editTool } from './tools/edit.js';
+import { execTool } from './tools/exec.js';
+import { webSearchTool } from './tools/web-search.js';
+import { readMemoryTool } from './tools/read-memory.js';
+import { writeMemoryTool } from './tools/write-memory.js';
+import { scheduleTaskTool } from './tools/schedule-task.js';
+import { readTasksTool } from './tools/read-tasks.js';
+export { readFileTool, writeFileTool, deleteFileTool, editTool, execTool, webSearchTool, readMemoryTool, writeMemoryTool, scheduleTaskTool, readTasksTool };
+export { createSearchHistoryTool } from './tools/search-history.js';
+/** 核心工具集：文件操作 + 搜索 + 记忆（Chat / Gateway 使用，再拼接 SCHEDULING_TOOLS 即为全量） */
+export const CORE_TOOLS = [
+    readFileTool,
+    writeFileTool,
+    deleteFileTool,
+    editTool,
+    execTool,
+    webSearchTool,
+    readMemoryTool,
+    writeMemoryTool,
+];
+/** 调度工具集 */
+export const SCHEDULING_TOOLS = [
+    scheduleTaskTool,
+    readTasksTool,
+];
+//# sourceMappingURL=index.js.map

package/dist/tool/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tool/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO;AACP,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC5J,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAIpE,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAc;IACpC,YAAY;IACZ,aAAa;IACb,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,cAAc;IACd,eAAe;CACf,CAAC;AAEF,YAAY;AACZ,MAAM,CAAC,MAAM,gBAAgB,GAAc;IAC1C,gBAAgB;IAChB,aAAa;CACb,CAAC"}

package/dist/tool/registry.d.ts

@@ -0,0 +1,43 @@
+/**
+ * 工具注册表
+ *
+ * 管理工具的注册、查询和调度。
+ * 提供 getDefinitions() 将已注册工具转为 OpenAI function calling 格式。
+ * 支持 sourceId 追踪，可按来源批量卸载（为 extension 系统提供基础）。
+ */
+import type { ToolDef, ToolResult } from './types.js';
+import type { Tool } from '../ai/index.js';
+import { ToolContext } from './env.js';
+export declare class ToolRegistry {
+    private tools;
+    private sources;
+    /**
+     * 注册一个工具
+     * @param tool - 工具定义
+     * @param sourceId - 来源标识，默认为 'builtin'。用于批量卸载时按来源清理。
+     */
+    register(tool: ToolDef, sourceId?: string): void;
+    /** 注销一个工具 */
+    unregister(name: string): boolean;
+    /**
+     * 按来源批量注销工具
+     * @param sourceId - 来源标识
+     * @returns 被注销的工具数量
+     */
+    unregisterSource(sourceId: string): number;
+    /** 按名称获取工具 */
+    get(name: string): ToolDef | undefined;
+    /** 获取 OpenAI function calling 格式的工具定义列表 */
+    getDefinitions(): Tool[];
+    /**
+     * 按名称执行工具
+     *
+     * @param name - 工具名称
+     * @param args - 调用参数，支持 __confirmed 标记跳过确认流程
+     * @param ctx - 工具执行上下文
+     * @returns 执行结果
+     * @throws PendingConfirmation 需要用户确认时
+     */
+    execute(name: string, args: Record<string, unknown>, ctx: ToolContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/tool/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tool/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,qBAAa,YAAY;IACxB,OAAO,CAAC,KAAK,CAA8B;IAC3C,OAAO,CAAC,OAAO,CAAkC;IAEjD;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,SAAY,GAAG,IAAI;IAQnD,aAAa;IACb,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOjC;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAW1C,cAAc;IACd,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAItC,2CAA2C;IAC3C,cAAc,IAAI,IAAI,EAAE;IAWxB;;;;;;;;OAQG;IACG,OAAO,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,WAAW,GACd,OAAO,CAAC,UAAU,CAAC;CAOtB"}

package/dist/tool/registry.js

@@ -0,0 +1,79 @@
+/**
+ * 工具注册表
+ *
+ * 管理工具的注册、查询和调度。
+ * 提供 getDefinitions() 将已注册工具转为 OpenAI function calling 格式。
+ * 支持 sourceId 追踪，可按来源批量卸载（为 extension 系统提供基础）。
+ */
+export class ToolRegistry {
+    tools = new Map();
+    sources = new Map();
+    /**
+     * 注册一个工具
+     * @param tool - 工具定义
+     * @param sourceId - 来源标识，默认为 'builtin'。用于批量卸载时按来源清理。
+     */
+    register(tool, sourceId = 'builtin') {
+        this.tools.set(tool.name, tool);
+        if (!this.sources.has(sourceId)) {
+            this.sources.set(sourceId, new Set());
+        }
+        this.sources.get(sourceId).add(tool.name);
+    }
+    /** 注销一个工具 */
+    unregister(name) {
+        for (const [, names] of this.sources) {
+            names.delete(name);
+        }
+        return this.tools.delete(name);
+    }
+    /**
+     * 按来源批量注销工具
+     * @param sourceId - 来源标识
+     * @returns 被注销的工具数量
+     */
+    unregisterSource(sourceId) {
+        const names = this.sources.get(sourceId);
+        if (!names)
+            return 0;
+        let count = 0;
+        for (const name of names) {
+            if (this.tools.delete(name))
+                count++;
+        }
+        this.sources.delete(sourceId);
+        return count;
+    }
+    /** 按名称获取工具 */
+    get(name) {
+        return this.tools.get(name);
+    }
+    /** 获取 OpenAI function calling 格式的工具定义列表 */
+    getDefinitions() {
+        return Array.from(this.tools.values()).map((tool) => ({
+            type: 'function',
+            function: {
+                name: tool.name,
+                description: tool.description,
+                parameters: tool.parameters
+            }
+        }));
+    }
+    /**
+     * 按名称执行工具
+     *
+     * @param name - 工具名称
+     * @param args - 调用参数，支持 __confirmed 标记跳过确认流程
+     * @param ctx - 工具执行上下文
+     * @returns 执行结果
+     * @throws PendingConfirmation 需要用户确认时
+     */
+    async execute(name, args, ctx) {
+        const tool = this.tools.get(name);
+        if (!tool) {
+            return { success: false, output: '', error: `未知工具: ${name}` };
+        }
+        return tool.execute(args, ctx);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/tool/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tool/registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,OAAO,YAAY;IAChB,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEjD;;;;OAIG;IACH,QAAQ,CAAC,IAAa,EAAE,QAAQ,GAAG,SAAS;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,aAAa;IACb,UAAU,CAAC,IAAY;QACtB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,QAAgB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC;QACrB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,KAAK,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,cAAc;IACd,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,2CAA2C;IAC3C,cAAc;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE;gBACT,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;aAC3B;SACD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CACZ,IAAY,EACZ,IAA6B,EAC7B,GAAgB;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;CACD"}

package/dist/tool/safeguard.d.ts

@@ -0,0 +1,21 @@
+import type { CommandClassification } from './types.js';
+/**
+ * 分类命令的安全性
+ *
+ * 判定顺序：
+ * 1. reject  — 明确禁止（format, diskpart）
+ * 2. confirm — 命中危险模式（删除、系统修改、管道注入等）
+ * 3. safe    — 只读命令，无需后续路径检查
+ * 4. confirm — 路径在工作区外或系统目录
+ * 5. safe    — 其余放行
+ *
+ * @returns 'safe' 可直接执行 / 'confirm' 需用户确认 / 'reject' 拒绝执行
+ */
+export declare function classifyCommand(command: string, workspaceRoot: string): CommandClassification;
+/**
+ * 分类文件路径的安全性
+ *
+ * @returns 'safe' 可直接操作 / 'confirm' 需用户确认
+ */
+export declare function classifyFilePath(targetPath: string, workspaceRoot: string): CommandClassification;
+//# sourceMappingURL=safeguard.d.ts.map

package/dist/tool/safeguard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeguard.d.ts","sourceRoot":"","sources":["../../src/tool/safeguard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA4KxD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC9B,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACnB,qBAAqB,CAwBvB;AAED;;;;GAIG;AACF,wBAAgB,gBAAgB,CAChC,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACnB,qBAAqB,CAYvB"}

package/dist/tool/safeguard.js

@@ -0,0 +1,212 @@
+import { resolve, isAbsolute, sep } from 'node:path';
+const READONLY_PATTERNS = [
+    // PowerShell read-only cmdlets & aliases
+    /^\s*(?:Get-ChildItem|dir|ls|Get-Content|cat|type|Get-Process|ps|Get-Service|Get-Location|pwd|gl|Get-Item|gi|Get-ItemProperty|gp|Get-Date|Get-Host|Get-Variable|gv|Get-Command|gcm|Get-Member|gm|Get-Alias|gal|Get-History|history|ghy|Select-String|sls|findstr|Test-Path|Measure-Object|measure|Sort-Object|sort|Group-Object|group|Select-Object|select|Format-List|fl|Format-Table|ft|Format-Wide|fw|Format-Hex|Write-Output|echo|write|Compare-Object|diff|compare|Where-Object|Join-Path|Split-Path|Resolve-Path|ConvertFrom-Json|ConvertFrom-Csv)\b/i,
+    // Unix read-only
+    /^\s*(?:head|tail|less|more|grep|egrep|fgrep|rg|find|wc|sort|uniq|cut|tr|file|stat|df|du|which|whereis|command|whoami|id|groups|printf|uname|hostname|basename|dirname|readlink|realpath)\b/i,
+    // Git read-only
+    /^\s*git\s+(?:status|log|diff|show|branch|tag|stash\s+list|remote\s+(?:-v|show)|config\s+(?:--list|--get\b)|ls-files|rev-parse|rev-list|describe|shortlog|blame|grep|notes\s+list|reflog|cherry|for-each-ref|name-rev)\b/i,
+    // npm read-only
+    /^\s*npm\s+(?:ls|list|view|info|outdated|version|config\s+list)\b/i
+];
+const DANGEROUS_PATTERNS = [
+    // Windows: delete operations (all forms — confirm before any deletion)
+    /^\s*del\b/i,
+    /^\s*rmdir\b/i,
+    /^\s*Remove-Item\b/i,
+    // Windows: system modification
+    /\bformat\b/i,
+    /\bdiskpart\b/i,
+    /reg\s+(delete|add)/i,
+    /Set-ExecutionPolicy/i,
+    // Windows: shutdown / service
+    /\bshutdown\b/i,
+    /Restart-Computer\b/i,
+    /Stop-Process\s+.*(svchost|winlogon|lsass|csrss)/i,
+    /Stop-Service\b/i,
+    // Windows: pipe to execution
+    /\|\s*iex\b/i,
+    /\|\s*Invoke-Expression\b/i,
+    /\|\s*cmd\b/i,
+    // Windows: redirect to system paths
+    />\s*%SystemRoot%/i,
+    />\s*C:\\Windows/i,
+    // Unix: recursive force delete
+    /\brm\s+-rf?\b/,
+    /\bfind\b.*\bdelete\b/,
+    // Unix: system modification
+    /\bdd\s+if=/,
+    /\bmkfs\./,
+    /\bchmod\s+777\s+\//,
+    // Unix: shutdown
+    /\bshutdown\b/,
+    /\breboot\b/,
+    /\binit\s+[06]/,
+    // Unix: redirect to system paths
+    />\s*\/etc\//,
+    />\s*\/bin\//,
+    />\s*\/boot\//,
+    // Unix: pipe to shell
+    /\|\s*(ba)?sh\b/,
+    /\|\s*zsh\b/,
+    // Cross-platform: dangerous patterns
+    /\bdrop\s+table\b/i,
+    /\bdrop\s+database\b/i,
+    /\bgit\s+push\s+--force\b/i,
+    /\bgit\s+reset\s+--hard\b/i
+];
+const SYSTEM_DIRS = [
+    'C:\\Windows',
+    'C:\\Program Files',
+    'C:\\Program Files (x86)',
+    '/etc',
+    '/bin',
+    '/sbin',
+    '/usr/bin',
+    '/usr/sbin',
+    '/boot',
+    '/sys',
+    '/dev',
+    '/proc'
+];
+function isDangerousCommand(command) {
+    if (DANGEROUS_PATTERNS.some((pattern) => pattern.test(command))) {
+        return true;
+    }
+    for (const segment of command.split('|')) {
+        if (DANGEROUS_PATTERNS.some((pattern) => pattern.test(segment))) {
+            return true;
+        }
+    }
+    return false;
+}
+function isReadonlyCommand(command) {
+    for (const segment of command.split('|')) {
+        if (!READONLY_PATTERNS.some((pattern) => pattern.test(segment))) {
+            return false;
+        }
+    }
+    return true;
+}
+function isPathInWorkspace(targetPath, workspaceRoot) {
+    const resolved = normalizePath(targetPath, workspaceRoot);
+    const normalizedRoot = resolve(workspaceRoot).toLowerCase();
+    const normalizedTarget = resolve(resolved).toLowerCase();
+    return normalizedTarget.startsWith(normalizedRoot + sep);
+}
+function isSystemPath(targetPath, workspaceRoot) {
+    const resolved = normalizePath(targetPath, workspaceRoot);
+    const normalized = resolve(resolved).toLowerCase();
+    return SYSTEM_DIRS.some((sysDir) => normalized.startsWith(sysDir.toLowerCase()));
+}
+function expandEnvVars(command) {
+    let result = command.replace(/%(\w+)%/g, (_, name) => {
+        return process.env[name] ?? `%${name}%`;
+    });
+    result = result.replace(/\$\{(\w+)\}/g, (_, name) => {
+        return process.env[name] ?? `\$\{${name}\}`;
+    });
+    result = result.replace(/\$([A-Za-z_]\w*)/g, (_, name) => {
+        return process.env[name] ?? `$${name}`;
+    });
+    return result;
+}
+function collectPaths(source, paths) {
+    const winAbsRe = /[A-Za-z]:\\(?:[^\\/:*?"<>|\r\n]+\\)*[^\\/:*?"<>|\r\n]*/g;
+    let match;
+    while ((match = winAbsRe.exec(source)) !== null) {
+        paths.push(match[0]);
+    }
+    const unixAbsRe = /(?<!\w)\/(?:[^\s'"]+)/g;
+    while ((match = unixAbsRe.exec(source)) !== null) {
+        const p = match[0];
+        if (p.length > 1 && !/^\/\d/.test(p) && !/\/$/.test(p)) {
+            paths.push(p);
+        }
+    }
+    const tildeRe = /(?<!\w)~\/(?:[^\s'"]+)/g;
+    while ((match = tildeRe.exec(source)) !== null) {
+        paths.push(match[0]);
+    }
+}
+function extractPaths(command) {
+    const paths = [];
+    collectPaths(command, paths);
+    const expanded = expandEnvVars(command);
+    if (expanded !== command) {
+        collectPaths(expanded, paths);
+    }
+    const winRelRe = /(?:\.\.\\)+(?:[^\s'"]+)/g;
+    let match;
+    while ((match = winRelRe.exec(command)) !== null) {
+        paths.push(match[0]);
+    }
+    const unixRelRe = /(?<!\w)(?:\.\.\/)+(?:[^\s'"]+)/g;
+    while ((match = unixRelRe.exec(command)) !== null) {
+        const p = match[0];
+        if (p.length > 1 && !/\/$/.test(p)) {
+            paths.push(p);
+        }
+    }
+    return paths;
+}
+/**
+ * 分类命令的安全性
+ *
+ * 判定顺序：
+ * 1. reject  — 明确禁止（format, diskpart）
+ * 2. confirm — 命中危险模式（删除、系统修改、管道注入等）
+ * 3. safe    — 只读命令，无需后续路径检查
+ * 4. confirm — 路径在工作区外或系统目录
+ * 5. safe    — 其余放行
+ *
+ * @returns 'safe' 可直接执行 / 'confirm' 需用户确认 / 'reject' 拒绝执行
+ */
+export function classifyCommand(command, workspaceRoot) {
+    if (/^\s*(format|diskpart)\b/i.test(command.trim())) {
+        return 'reject';
+    }
+    if (isDangerousCommand(command)) {
+        return 'confirm';
+    }
+    if (isReadonlyCommand(command)) {
+        return 'safe';
+    }
+    const paths = extractPaths(command);
+    for (const p of paths) {
+        if (isSystemPath(p, workspaceRoot)) {
+            return 'confirm';
+        }
+        if (!isPathInWorkspace(p, workspaceRoot)) {
+            return 'confirm';
+        }
+    }
+    return 'safe';
+}
+/**
+ * 分类文件路径的安全性
+ *
+ * @returns 'safe' 可直接操作 / 'confirm' 需用户确认
+ */
+export function classifyFilePath(targetPath, workspaceRoot) {
+    const normalized = normalizePath(targetPath, workspaceRoot);
+    if (isSystemPath(normalized, workspaceRoot)) {
+        return 'reject';
+    }
+    if (!isPathInWorkspace(normalized, workspaceRoot)) {
+        return 'confirm';
+    }
+    return 'safe';
+}
+function normalizePath(targetPath, workspaceRoot) {
+    let resolved = targetPath;
+    if (resolved.startsWith('~')) {
+        const home = process.env.HOME || process.env.USERPROFILE || '';
+        resolved = resolved.replace(/^~/, home);
+    }
+    if (isAbsolute(resolved)) {
+        return resolved;
+    }
+    return resolve(workspaceRoot, resolved);
+}
+//# sourceMappingURL=safeguard.js.map

package/dist/tool/safeguard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeguard.js","sourceRoot":"","sources":["../../src/tool/safeguard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrD,MAAM,iBAAiB,GAAa;IACnC,yCAAyC;IACzC,4hBAA4hB;IAC5hB,iBAAiB;IACjB,6LAA6L;IAC7L,gBAAgB;IAChB,0NAA0N;IAC1N,gBAAgB;IAChB,mEAAmE;CACnE,CAAC;AAEF,MAAM,kBAAkB,GAAa;IACpC,uEAAuE;IACvE,YAAY;IACZ,cAAc;IACd,oBAAoB;IACpB,+BAA+B;IAC/B,aAAa;IACb,eAAe;IACf,qBAAqB;IACrB,sBAAsB;IACtB,8BAA8B;IAC9B,eAAe;IACf,qBAAqB;IACrB,kDAAkD;IAClD,iBAAiB;IACjB,6BAA6B;IAC7B,aAAa;IACb,2BAA2B;IAC3B,aAAa;IACb,oCAAoC;IACpC,mBAAmB;IACnB,kBAAkB;IAClB,+BAA+B;IAC/B,eAAe;IACf,sBAAsB;IACtB,4BAA4B;IAC5B,YAAY;IACZ,UAAU;IACV,oBAAoB;IACpB,iBAAiB;IACjB,cAAc;IACd,YAAY;IACZ,eAAe;IACf,iCAAiC;IACjC,aAAa;IACb,aAAa;IACb,cAAc;IACd,sBAAsB;IACtB,gBAAgB;IAChB,YAAY;IACZ,qCAAqC;IACrC,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,2BAA2B;CAC3B,CAAC;AAEF,MAAM,WAAW,GAAG;IACnB,aAAa;IACb,mBAAmB;IACnB,yBAAyB;IACzB,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,WAAW;IACX,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;CACP,CAAC;AAEF,SAAS,kBAAkB,CAAC,OAAe;IAC1C,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACzC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB,EAAE,aAAqB;IACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEzD,OAAO,gBAAgB,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,aAAqB;IAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACrC,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;QACpD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;QACnD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;QACxD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,KAAe;IACpD,MAAM,QAAQ,GAAG,yDAAyD,CAAC;IAC3E,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,SAAS,GAAG,wBAAwB,CAAC;IAC3C,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAC;IAC1C,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE7B,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC;IAC5C,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,SAAS,GAAG,iCAAiC,CAAC;IACpD,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAC9B,OAAe,EACf,aAAqB;IAErB,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;GAIG;AACF,MAAM,UAAU,gBAAgB,CAChC,UAAkB,EAClB,aAAqB;IAErB,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAE5D,IAAI,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,aAAqB;IAC/D,IAAI,QAAQ,GAAG,UAAU,CAAC;IAC1B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC"}

package/dist/tool/tools/delete-file.d.ts

@@ -0,0 +1,10 @@
+import type { ToolDef } from '../types.js';
+/**
+ * delete_file — 删除文件
+ *
+ * 删除操作始终需要用户确认（不可逆）。
+ * 仅支持删除文件，不支持删除目录。
+ * 系统路径始终拒绝。
+ */
+export declare const deleteFileTool: ToolDef;
+//# sourceMappingURL=delete-file.d.ts.map

package/dist/tool/tools/delete-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-file.d.ts","sourceRoot":"","sources":["../../../src/tool/tools/delete-file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAc,MAAM,aAAa,CAAC;AAIvD;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,OAmD5B,CAAC"}

package/dist/tool/tools/delete-file.js

@@ -0,0 +1,52 @@
+import { rm, stat } from 'node:fs/promises';
+import { PendingConfirmation } from '../types.js';
+/**
+ * delete_file — 删除文件
+ *
+ * 删除操作始终需要用户确认（不可逆）。
+ * 仅支持删除文件，不支持删除目录。
+ * 系统路径始终拒绝。
+ */
+export const deleteFileTool = {
+    name: 'delete_file',
+    description: 'Delete a file. Always requires user confirmation.',
+    parameters: {
+        type: 'object',
+        properties: {
+            path: {
+                type: 'string',
+                description: 'File path (relative to workspace or absolute)'
+            }
+        },
+        required: ['path']
+    },
+    async execute(args, ctx) {
+        const userPath = args.path;
+        if (!userPath) {
+            return { success: false, output: '', error: '缺少参数: path' };
+        }
+        const resolved = ctx.resolvePath(userPath);
+        const { path: filePath, classification } = resolved;
+        if (!args.__confirmed) {
+            throw new PendingConfirmation('delete_file', { path: userPath }, `确认删除 "${userPath}"？此操作不可恢复。`);
+        }
+        if (classification === 'reject') {
+            return { success: false, output: '', error: `拒绝删除系统路径: ${userPath}` };
+        }
+        try {
+            const info = await stat(filePath);
+            if (info.isDirectory()) {
+                return { success: false, output: '', error: `目标是目录而非文件: ${userPath}` };
+            }
+            await rm(filePath);
+            return { success: true, output: `已删除文件: ${userPath}` };
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return { success: false, output: '', error: `路径不存在: ${userPath}` };
+            }
+            return { success: false, output: '', error: `删除失败: ${error.message}` };
+        }
+    }
+};
+//# sourceMappingURL=delete-file.js.map

package/dist/tool/tools/delete-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-file.js","sourceRoot":"","sources":["../../../src/tool/tools/delete-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAY;IACtC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,mDAAmD;IAChE,UAAU,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACX,IAAI,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+CAA+C;aAC5D;SACD;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;KAClB;IAED,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,GAAgB;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC;QAEpD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,IAAI,mBAAmB,CAC5B,aAAa,EACb,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,SAAS,QAAQ,YAAY,CAC7B,CAAC;QACH,CAAC;QAED,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,QAAQ,EAAE,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAElC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,QAAQ,EAAE,EAAE,CAAC;YACxE,CAAC;YAED,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,QAAQ,EAAE,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,CAAC;YACpE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAU,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QACnF,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/tool/tools/edit.d.ts

@@ -0,0 +1,10 @@
+import type { ToolDef } from '../types.js';
+/**
+ * edit — 精确字符串替换编辑文件
+ *
+ * 在文件中查找 oldString 并替换为 newString。
+ * 使用原子写入，自动保留原文件的 BOM 和行尾格式。
+ * 非 replaceAll 模式下，oldString 必须在文件中恰好出现一次。
+ */
+export declare const editTool: ToolDef;
+//# sourceMappingURL=edit.d.ts.map

package/dist/tool/tools/edit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit.d.ts","sourceRoot":"","sources":["../../../src/tool/tools/edit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAc,MAAM,aAAa,CAAC;AA0BvD;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,EAAE,OAgJtB,CAAC"}